How should an organization determine the priority of its remediation efforts after a vulnerability assessment has been conducted? A. Use an impact-based approach.
B. Use a risk-based approach.
C. Use a criticality-based approach.
D. Use a threat-based approach.

Option B

Explanation:

In simple words, Risk-based vulnerabilities assessment (RBVM) relates to the cyber security approach in which application vulnerabilities abatement is prioritized by organisations accordingly to the problems they encountered to the organisation.

The requirement for consequence vulnerability management is motivated by the reality that more weaknesses occur in large enterprise systems than can be addressed by corporate cyber security departments.

it would be d). more resources must be obtained to attain that combination of goods and services